Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c2684b-c1bd-4785-a1c4-390897be3c8d.roa
File: 28c2684b-c1bd-4785-a1c4-390897be3c8d.roa (raw, json)
Hash identifier: TsBJnWUK3Y0tR9o6io8Wlq23KlRGuDV2T+pJCPgfY2E=
Subject key identifier: 33:99:1B:F2:53:36:ED:3D:C3:75:17:84:39:6B:B6:5D:C6:46:C0:82
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C82D478D3EC5DAD6573D0C35CA9943B7D932D00
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c2684b-c1bd-4785-a1c4-390897be3c8d.roa
Signing time: Tue 18 Mar 2025 00:31:50 +0000
ROA not before: Tue 18 Mar 2025 00:31:50 +0000
ROA not after: Tue 22 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:82:d4:78:d3:ec:5d:ad:65:73:d0:c3:5c:a9:94:3b:7d:93:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 18 00:31:50 2025 GMT
Not After : Apr 22 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:5a:2b:01:69:12:95:f6:4b:50:08:bc:a4:
59:07:e5:e6:d9:72:9c:06:b2:d3:87:a0:6e:67:f1:
f5:de:39:ed:92:12:f7:f2:db:62:9a:ab:e8:1b:fb:
ad:4b:eb:67:19:08:62:d6:09:38:f3:e8:f6:ac:06:
3a:7c:59:58:22:33:14:84:cf:d0:c9:d0:e8:ab:50:
1d:31:1b:fc:e1:d1:21:d0:91:20:46:1e:a0:8e:4c:
5e:4e:ab:6a:00:14:9b:14:d5:85:0f:a2:8b:1c:26:
bc:dc:f5:28:10:72:2d:a2:5b:47:b2:9d:35:38:ed:
04:27:5d:8e:6c:10:b1:ff:1d:f4:bf:7b:05:95:93:
a9:28:0e:b7:c1:a4:b4:17:11:fe:24:fc:27:0f:c3:
23:33:e7:62:1c:85:bf:4b:06:a4:f5:1b:37:2c:1f:
65:27:35:91:7c:1e:b9:55:b5:39:48:ca:f5:dd:77:
bc:4a:64:2e:cb:2e:a7:58:57:03:67:7a:73:2c:1d:
12:c1:0a:e4:3b:fe:ef:39:e9:ba:d4:e8:d1:c4:a8:
5a:34:38:34:9f:19:3a:9b:db:db:48:33:61:34:94:
de:d0:c3:82:62:a8:b2:7f:16:03:54:48:86:cc:da:
8b:0a:cc:da:06:c8:7f:95:0b:2f:d4:78:72:1e:df:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:1B:F2:53:36:ED:3D:C3:75:17:84:39:6B:B6:5D:C6:46:C0:82
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28c2684b-c1bd-4785-a1c4-390897be3c8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:ba:6d:70:35:39:13:b9:5a:a8:de:83:a7:29:1a:83:ed:98:
57:4f:ba:02:49:85:04:ee:67:93:56:fc:c8:f0:85:87:82:7e:
27:8d:dc:c0:2a:cf:72:35:97:d8:8f:8b:99:34:21:5a:32:79:
17:fd:c7:ee:78:32:5e:b0:43:6f:65:55:e7:72:3f:b1:82:2a:
c2:c8:09:71:a9:f4:ca:bb:34:5a:61:94:84:c2:04:25:10:dd:
6d:d5:47:2a:2a:85:79:5e:8f:7e:b5:88:74:08:05:9b:3d:2f:
4a:de:28:97:37:5e:20:0a:bf:20:5a:0d:79:29:da:15:0a:d3:
df:ae:11:02:8f:f0:c2:f7:20:88:cb:ff:0d:0b:3e:08:bb:ab:
27:f8:82:bd:a6:e7:0d:c1:f1:bc:ba:5e:4d:f9:ab:4c:4d:d6:
2f:f1:9b:d6:ed:aa:08:e2:c3:3a:66:4e:56:ac:c1:4f:ea:f8:
c3:a8:9c:fa:30:52:f7:e0:81:c8:08:cf:33:ec:f5:bb:4e:5e:
72:8b:ca:30:09:cd:fa:1d:e2:b1:b2:89:5d:46:82:84:65:77:
1f:8c:f4:6f:52:f0:8c:3b:2c:74:e0:96:41:32:a5:ac:af:78:
5e:96:ff:eb:24:3f:36:43:ef:c9:36:4c:67:67:38:59:72:46:
67:90:e6:09
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHILUeNPsXa1lc9DDXKmUO32TLQAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MDAzMTUwWhcNMjUwNDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjM0NWRlZjE4NGZkOTcwMDY4MjcyYzdjM2M0ZDNkOWIy
M2EwZGNjOTZlZWIxMGYyMDY0ODNlNTQ1YWVlYjE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDuMForAWkSlfZLUAi8pFkH5ebZcpwGstOHoG5n8fXeOe2S
Evfy22Kaq+gb+61L62cZCGLWCTjz6PasBjp8WVgiMxSEz9DJ0OirUB0xG/zh0SHQ
kSBGHqCOTF5Oq2oAFJsU1YUPooscJrzc9SgQci2iW0eynTU47QQnXY5sELH/HfS/
ewWVk6koDrfBpLQXEf4k/CcPwyMz52Ichb9LBqT1GzcsH2UnNZF8HrlVtTlIyvXd
d7xKZC7LLqdYVwNnenMsHRLBCuQ7/u856brU6NHEqFo0ODSfGTqb29tIM2E0lN7Q
w4JiqLJ/FgNUSIbM2osKzNoGyH+VCy/UeHIe3xevAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUM5kb8lM27T3DdReEOWu2XcZGwIIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI4YzI2ODRiLWMxYmQtNDc4NS1hMWM0LTM5MDg5N2JlM2M4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQyEtAwDQYJKoZIhvcNAQELBQADggEBAAy6bXA1ORO5Wqjeg6cpGoPtmFdP
ugJJhQTuZ5NW/MjwhYeCfieN3MAqz3I1l9iPi5k0IVoyeRf9x+54Ml6wQ29lVedy
P7GCKsLICXGp9Mq7NFphlITCBCUQ3W3VRyoqhXlej361iHQIBZs9L0reKJc3XiAK
vyBaDXkp2hUK09+uEQKP8ML3IIjL/w0LPgi7qyf4gr2m5w3B8by6Xk35q0xN1i/x
m9btqgjiwzpmTlaswU/q+MOonPowUvfggcgIzzPs9btOXnKLyjAJzfod4rGyiV1G
goRldx+M9G9S8Iw7LHTglkEypayveF6W/+skPzZD78k2TGdnOFlyRmeQ5gk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:44 2025 by rpki-client